# CVEs published 2005-11-27

12 CVEs were published on November 27, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3858](https://cve.now/CVE-2005-3858.md): Memory leak in the ip6\_input\_finish function in ip6\_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of se (no CVSS)
- [CVE-2005-3857](https://cve.now/CVE-2005-3857.md): The time\_out\_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log messa (no CVSS)
- [CVE-2005-3856](https://cve.now/CVE-2005-3856.md): The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when th (no CVSS)
- [CVE-2005-3850](https://cve.now/CVE-2005-3850.md): Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to (no CVSS)
- [CVE-2005-3851](https://cve.now/CVE-2005-3851.md): Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2005-3852](https://cve.now/CVE-2005-3852.md): SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbi (no CVSS)
- [CVE-2005-3853](https://cve.now/CVE-2005-3853.md): SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id a (no CVSS)
- [CVE-2005-3854](https://cve.now/CVE-2005-3854.md): Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-3855](https://cve.now/CVE-2005-3855.md): SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID pa (no CVSS)
- [CVE-2005-3847](https://cve.now/CVE-2005-3847.md): The handle\_stop\_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cau (no CVSS)
- [CVE-2005-3848](https://cve.now/CVE-2005-3848.md): Memory leak in the icmp\_push\_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (me (no CVSS)
- [CVE-2005-3849](https://cve.now/CVE-2005-3849.md): Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.